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Abstract 

It  is  shown  that  over  any  countable  first-order  structure,  I N  D  programs  with  dictionaries  accept 
exactly  the  77}  relations.  This  extends  a  result  of  Harel  and  Kozen  (Inform,  and  Control  63  (1- 
2)  (1984)  118)  relating  IND  and  77}  over  countable  structures  with  some  coding  power,  and 
provides  a  computational  analog  of  a  result  of  Barwise  et  al.  (J.  Symbolic  Logic  36  (1971)  108) 
relating  the  77}  relations  on  a  countable  structure  to  a  certain  family  of  inductively  definable 
relations  on  the  hereditarily  finite  sets  over  that  structure. 
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1.  Introduction 

Perhaps  the  central  result  of  the  theory  of  inductive  definability  is  Kleene’s  theorem , 
which  states  that  over  f^J,  a  relation  is  77}  iff  it  is  inductively  definable.  The  coding 
power  of  l\J  is  essential  in  the  proof,  and  considerable  effort  has  been  spent  in  trying 
to  generalize  the  result  to  structures  without  a  coding  capability.  One  can  do  without 
coding  in  the  presence  of  some  set-theoretic  apparatus  over  the  structure,  although 
the  theory  is  somewhat  less  satisfactory.  There  are  numerous  results  that  approximate 
Kleene’s  theorem  in  general  structures,  but  these  results  typically  hold  only  under 
various  special  conditions  which  are  often  difficult  to  state  (see  [1,10]). 

One  such  result  is  the  following.  In  [2]  (see  [1,  Corollary  VI.3.9(i),  p.  214])  it  is 
shown  that  over  any  countable  structure  21,  the  77}  relations  are  equivalent  to  a  certain 
class  of  inductively  definable  relations  over  HF21,  where  F0F21  refers  to  the  structure  21 
augmented  with  its  hereditarily  finite  sets.  Not  all  inductively  definable  relations  over 
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H  F  21  are  allowed,  but  only  a  certain  subclass  defined  in  terms  of  a  restricted  form 
of  quantification  on  the  sets.  A  similar  result  can  be  found  in  [9].  If  in  addition  the 
structure  has  a  coding  capability,  then  the  hereditarily  finite  sets  can  be  coded  directly 
in  the  structure.  This  result  allows  Kleene’s  theorem  to  be  broken  into  two  parts,  one 
using  the  auxiliary  set-theoretic  apparatus  in  the  Kleene  construction,  and  the  second 
coding  the  set-theoretic  apparatus  into  the  structure  itself. 

Kleene’s  theorem  has  a  more  computational  interpretation  than  is  apparent  from 
[1,10].  In  [5],  a  programming  language  IND  was  defined  and  shown  to  compute  exactly 
the  inductive  relations  over  any  structure.  By  Kleene’s  theorem,  IND  computes  exactly 
the  77}  sets  over  I^J.  In  fact,  the  programming  language  IND  can  also  be  used  to  give 
a  more  computationally  motivated  proof  of  Kleene’s  theorem  (see  [6]). 

In  this  paper  we  augment  IND  programs  with  dictionaries ,  a  common  abstract  data 
structure  allowing  storage  and  retrieval  of  data  indexed  by  keys.  Operations  of  insertion, 
membership  testing,  and  access  of  an  element  by  its  key  are  allowed.  Deletion  is  often 
allowed  as  well,  although  we  do  not  need  it  here.  In  real  implementations,  dictionaries 
can  be  built  from  any  one  of  a  number  of  concrete  data  structures:  trees,  hashtables, 
extensible  arrays,  linked  lists,  heaps,  searchable  queues,  or  cons  structures  as  in  the 
programming  languages  Lisp  or  Scheme. 

We  show  that  over  any  countable  first-order  structure,  IND  programs  with  dictionaries 
accept  exactly  the  77}  relations.  This  is  the  computational  analog  of  the  result  of  [2] 
mentioned  above.  Here  dictionaries  play  the  same  role  as  the  hereditarily  finite  sets  in 
[2]:  they  are  a  data  structure,  nothing  more  nor  less. 

The  main  contribution  here  is  not  so  much  the  result  itself,  but  rather  a  new  per¬ 
spective  on  the  results  of  [1,2].  The  language  of  inductive  definability  and  admissible 
set  theory  is  largely  static,  whereas  our  approach  is  dynamic.  The  language  IND  is  a 
true  programming  language  (although  it  computes  highly  noncomputable  things),  and 
it  is  designed  to  be  programmable.  Similarly,  dictionaries  are  a  true  data  structure,  also 
designed  to  be  programmable,  unlike  the  hereditarily  finite  sets.  Thus  this  result  may 
help  to  clarify  the  role  of  the  hereditarily  finite  sets  and  the  special  conditions  of  [1, 
Corollary  VI.3.9(i),  p.  214]. 

Other  results  that  study  the  power  of  auxiliary  data  structures  and  unbounded  memory 
in  programming  languages  and  logics  can  be  found  in  [4,7,8,12-14]  (see  also  [6]). 


2.  The  programming  language  IND 

The  programming  language  IND  was  introduced  in  [5]  (see  also  [6]).  At  the  most 
basic  level,  IND  programs  consist  of  finite  sequences  of  labeled  statements  of  three 
forms: 

•  assignment:  £  :  x  3  £ :  y  :=  V 

•  conditional  jump:  £  :  if  7^(7)  then  goto  £' 

•  halt  statement:  £  :  accept  £  :  reject. 

More  complex  programming  constructs  can  be  defined  from  these. 
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The  semantics  of  the  existential  and  universal  assignment  is  very  much  like  alternat¬ 
ing  Turing  machines  [3]  (see  also  [6]),  except  that  the  branching  is  infinite.  Intuitively, 
the  execution  of  an  existential  or  universal  assignment  to  a  variable  x  causes  infinitely 
many  subprocesses  to  be  spawned,  one  for  each  element  of  the  domain.  The  subprocess 
corresponding  to  element  a  continues  with  a  assigned  to  the  variable  x.  If  the  statement 
is  x  :=  3,  the  branching  is  existential;  if  it  is  x  :=  V,  the  branching  is  universal.  The 
conditional  jump  tests  the  atomic  formula  R(t ),  and  if  true,  jumps  to  the  indicated  label 
in  the  program.  The  accept  and  reject  commands  halt  and  pass  a  Boolean  value,  true 
or  false,  respectively,  back  up  to  the  parent.  A  process  waiting  at  an  existential  branch 
reports  acceptance  to  its  parent  as  soon  as  one  of  its  children  reports  acceptance;  a 
process  waiting  at  a  universal  branch  reports  acceptance  to  its  parent  as  soon  as  all  of 
its  children  report  acceptance. 

The  input  is  an  initial  assignment  to  the  program  variables.  Execution  of  statements 
causes  an  infinitely  branching  computation  tree  to  be  generated  downward,  and  Boolean 
accept  (true)  or  reject  (false)  values  are  passed  back  up  the  tree,  a  Boolean  V  being 
computed  at  each  existential  node  and  a  Boolean  A  being  computed  at  each  universal 
node.  The  program  is  said  to  accept  the  input  if  the  root  of  the  computation  tree  ever 
becomes  labeled  with  the  Boolean  value  true  on  that  input;  it  is  said  to  reject  the  input 
if  the  root  ever  becomes  labeled  with  the  Boolean  value  false  on  that  input;  and  it  is 
said  to  halt  on  an  input  if  it  either  accepts  or  rejects  that  input.  An  IND  program  that 
halts  on  all  inputs  is  said  to  be  total. 

Note  that  there  is  no  explicit  mechanism  for  spawning  processes  or  for  passing 
Boolean  values  back  up  the  computation  tree.  These  are  just  intuitive  devices.  The 
reader  is  referred  to  [6]  for  a  more  formal  treatment  of  the  semantics  of  IND  programs. 

In  [5],  it  was  shown  that  IND  programs  accept  exactly  the  inductive  relations  on  any 
first-order  structure,  and  that  total  IND  programs  accept  exactly  the  hyperelementary 
relations.  The  theorem  that  a  relation  is  hyperelementary  iff  it  is  both  inductive  and 
coinductive  is  proved  quite  simply  by  running  a  program  for  the  relation  and  its  com¬ 
plement  in  parallel,  as  with  the  corresponding  result  for  r.e.  and  co-r.e.  sets.  Over  l\l, 
IND  programs  can  be  used  as  a  notation  for  recursive  ordinals.  In  fact,  the  recursive 
ordinals  are  exactly  the  running  times  of  IND  programs  over  l\l.  This  formalism  turns 
out  to  be  equivalent  to  more  conventional  approaches  (see  for  example  [10,11]),  but 
has  a  decidedly  more  computational  flavor.  However,  note  that  the  relations  computed 
by  IND  programs  are  highly  noncomputable  in  the  usual  sense  of  the  word. 

Other  useful  programming  constructs  can  be  defined  in  terms  of  those  listed  above. 
An  unconditional  jump  is  effected  by  a  conditional  jump  with  test  true.  More  com¬ 
plicated  forms  of  conditional  branching,  for  and  while  loops,  etc.  can  be  effected  by 
manipulation  of  control  flow.  For  example,  the  statement 

if  R(t )  then  reject  else  f 

is  simulated  by  the  program  segment 

if  R(t)  then  goto 

goto  /; 

reject 
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A  simple  assignment  is  effected  by  guessing  and  verifying: 
x  :=  t 

is  simulated  by 

x  :=  3; 

if  then  reject 

The  process  spawns  infinitely  many  subprocesses,  all  but  one  of  which  immediately 
reject. 

A  relation  is  first-order  iff  it  is  definable  by  a  loop-free  program.  However,  IND 
can  also  accept  inductively  definable  relations  that  are  not  first-order  definable.  For 
example,  the  reflexive  transitive  closure  of  a  relation  R  is  definable  by  the  following 
program,  which  takes  its  input  in  the  variables  x,z  and  accepts  if  ( x,z)eR *: 

while  i^z  { 

y~  3; 

if  -lR(x,  y)  then  reject; 

x  :=  y; 

} 

accept; 

Further  examples  involving  two-person  games  of  perfect  information  and  well-founded 
binary  relations  can  be  found  in  [5,6]. 

Any  relation  that  is  expressed  as  a  least  fixpoint  of  a  monotone  map  defined  by  a 
positive  first-order  formula  can  be  computed  by  an  IND  program.  Essentially,  the  pro¬ 
gram  deconstructs  the  formula  in  a  top-down  fashion,  executing  existential  assignments 
at  existential  quantifiers,  executing  universal  assignments  at  universal  quantifiers,  using 
control  flow  for  the  propositional  connectives,  using  conditional  tests  for  the  atomic 
formulas,  and  looping  back  to  the  top  of  the  program  at  (positive)  occurrences  of  the 
inductive  relation  symbol. 

Conversely,  any  relation  computed  by  an  IND  program  is  inductive  in  the  traditional 
sense,  essentially  because  the  formal  semantics  of  acceptance  involves  the  least  fixpoint 
of  an  inductively  defined  set  of  labelings  of  the  computation  tree  with  Boolean  values. 
We  refer  the  reader  to  [5,6]  for  further  details. 


3.  IND  programs  with  dictionaries 

A  dictionary  is  an  abstract  data  structure  for  storing  data  values  indexed  by  keys. 
Operations  supported  are  insertion,  membership,  and  lookup  of  a  data  item  by  key. 
Deletion  is  also  sometimes  included,  although  we  will  not  need  it  for  our  application. 
Dictionaries  can  be  implemented  in  a  variety  of  ways:  hashtables,  linked  lists,  extensible 
arrays,  heaps,  searchable  queues,  or  cons  structures  as  in  Lisp  and  Scheme. 

Formally,  a  dictionary  is  a  partial  function  with  finite  domain  from  a  set  of  keys 
to  set  of  data  values.  In  our  application,  the  keys  are  ^-tuples  of  elements  of  A  and 
the  data  values  are  elements  of  A,  thus  dictionaries  are  (extensional)  partial  functions 
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Ak—*A.  The  following  operations  on  dictionaries  are  supported: 
reset(  )  clear  the  dictionary 

put(x,  y)  insert  data  element  y  with  key  x  =  xi, . . .  ,x* 

containsKey(x)  does  there  exist  an  entry  with  key  x? 
get(x)  get  the  data  element  corresponding  to  key  x 

There  is  a  separate  version  for  each  arity  k.  For  simplicity,  we  assume  that  there  is 
a  separate  collection  of  program  variables  ranging  over  dictionaries,  and  that 

they  are  initialized  to  the  empty  dictionary.  Assignments  and  equality  tests  may  not  be 
applied  to  dictionaries;  only  the  operations  above  are  allowed. 

Theorem  3.1.  Let  21  be  a  first-order  structure  with  countable  domain  A.  Any  77} 
relation  on  21  is  accepted  by  an  IND  program  with  dictionaries. 


Proof.  By  transforming  to  prenex  form  and  Skolemizing,  every  77}  formula  can  be 
written  with  a  quantifier  prefix  of  the  form 

V / 1  :  A*1  -►  A  . . .  V/*  :  A"k  ->  A  3xx  :  A . . .  3xm  :  A 

followed  by  a  quantifier- free  part  </>(/i, . . .  ,fk,x\9 . . .  ,xm).  There  may  be  other  free 
variables  besides  those  mentioned.  In  the  presence  of  a  definable  pairing  function  (as 
is  the  case  with  N),  we  could  further  reduce  to  the  form 

V/3x  </>(/,  x),  (1) 


where  /  is  unary,  but  in  general  we  do  not  have  this  luxury.  However,  for  simplicity 
of  notation,  we  will  give  the  construction  only  for  case  (1),  since  all  the  main  ideas 
are  already  contained  here. 

Amend  the  semantics  of  (/)  to  allow  as  first  argument  a  partial  function  with  finite 
domain  as  represented  by  a  dictionary  d.  We  think  of  d  as  a  finite  approximation  to  a 
total  function  /.  If  d  does  not  have  enough  information  to  determine  whether  </>(/, x), 
then  the  value  of  </>(<7,x)  is  defined  to  be  false. 

The  value  of  fi(d,x)  can  easily  be  determined  by  a  loop-free  IND  program.  For 
example,  if  </>(/,  x)  is  x  =  /(/(x)),  then  to  simulate 

if  x  =  /(/(x))  then  a  else  /?, 
we  could  write 


if  <i.containsKey(x)  { 
y  :=  d.get(x); 
if  d.containsKey(y)  { 
z  :=  d.get(y); 
if  x  =  z  then  a  else  /?; 

} 

} 

goto  P; 


//does  d  contain  a  value  for  /(x)? 

//if  so,  get  it 

//does  d  contain  a  value  for  /(/(x))? 
//if  so,  get  it 

//test  whether  x  =  /(/(x)) 
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Note  that  if  d  does  not  contain  enough  information  to  determine  the  value  of  /(/(x)), 
then  control  is  transferred  to  p. 

We  write  dQf  and  say  that  /  extends  d  if  the  domain  of  d  is  contained  in  the 
domain  of  /,  and  if  d  and  /  agree  on  the  domain  of  d.  Our  analysis  is  based  on  the 
following  two  continuity  properties: 

Lemma  3.2. 

(i)  If  d\Lf  and  fi(d,x),  then  </>(/, x). 

(ii)  If  </>(/, x),  then  there  exists  d\Lf  with  finite  domain  such  that  fi(d,x). 

These  properties  hold  because  the  truth  value  of  </>(/,  x)  is  determined  by  finitely 
many  values  of  /,  since  there  are  only  finitely  many  occurrences  of  /  in  </>.  If  all 
those  values  are  represented  by  d ,  then  </>(/,  x)  and  fi(d,x)  will  have  the  same  truth 
value. 

Here  is  an  IND  program  with  a  single  unary  dictionary  d  that  tests  whether  (1) 
holds.  It  uses  d  to  construct  finite  approximations  of  /.  As  mentioned,  the  test  fi(d,x) 
in  the  while  statement  can  be  computed  by  a  loop-free  IND  program. 

<i.reset(  ); 

x  :=  3; 

while  -i  <fi(d,x)  { 

V-=  3; 

if  d.containsKey(y)  then  reject; 

z  :=  V; 

<i.put(y,z); 
x  :=  3; 

} 

accept; 

The  program  iteratively  extends  d  in  all  possible  ways,  seeking  a  finite  partial  function 
d  and  an  x  for  which  fi(d,x). 

We  wish  to  show  that  this  program  accepts  iff  (1)  holds.  Suppose  first  that  (1)  holds. 
To  show  that  the  program  accepts,  it  suffices  to  exhibit  an  accepting  subtree  of  the 
computation  tree.  This  is  a  subtree  obtained  by  determinizing  every  existential  branch 
(that  is,  pruning  all  children  except  one),  such  that  all  paths  in  the  resulting  tree  lead 
to  an  accept  statement. 

We  determinize  the  existential  branches  as  follows.  Let  ^  be  an  arbitrary  but  fixed 
ordering  of  A  of  order  type  co,  which  exists  since  A  is  countable.  Let  next(d)  be  the 
^ -least  element  of  A  not  contained  in  the  domain  of  d.  Let  witness(d)  be  the  ^ -least 
element  x  for  which  there  exists  a  total  /  extending  d  such  that  </>(/, x).  Such  an  x 
exists  by  (1).  To  resolve  the  two  assignments  x  :=  3,  use  the  value  witness(d).  To 
resolve  the  assignment  y  :=  3,  use  the  value  next(d).  If  these  values  were  expressible, 
the  resulting  subtree  would  be  generated  by  the  program 

d.reset(  ); 
x  :=  witness(d); 
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while  -i  fi(d,x)  { 
y  :=  next (d); 
z  :=  V; 
d.put(y,z); 
x  :=  witness(J); 

} 

accept; 

Note  that  we  were  also  able  to  omit  the  test 

if  J.containsKey(j)  then  reject 

since  next(d)  is  never  in  the  domain  of  d. 

To  show  that  every  path  in  the  computation  tree  of  this  new  program  leads  to  accep¬ 
tance,  it  suffices  to  show  that  the  while  loop  terminates  along  every  path.  Suppose  it 
did  not.  Any  computation  path  for  which  the  while  loop  does  not  terminate  generates 
a  total  function  /  \A  — >  A,  namely  the  limit  of  the  values  of  d  along  that  path.  By  (1), 
there  exists  x  such  that  </>(/, x).  By  Lemma  3.2(h),  there  exists  a  finite  approximation 
eQf  such  that  </>(e,x).  By  Lemma  3.2(i),  there  exists  a  value  of  d  along  the  compu¬ 
tation  path  such  that  fi(d,x),  which  would  have  caused  the  while  loop  to  terminate. 
This  is  a  contradiction. 

Now  we  argue  that  if  the  original  program  accepts,  then  (1)  holds.  Consider  any  ac¬ 
cepting  subtree  obtained  by  resolving  the  existential  branches.  For  any  total  /  :A^A, 
resolve  the  universal  branch  z  :=  V  by  supplying  the  value  of  f(y).  This  results  in 
a  single  computation  path  of  the  accepting  subtree,  since  there  are  no  more  branches. 
Since  the  subtree  is  accepting,  the  path  must  terminate.  But  by  construction,  /  ex¬ 
tends  all  values  of  d  along  that  path,  and  the  final  values  of  d  and  x  satisfy  </>(<i,x), 
since  the  while  loop  terminated.  By  Lemma  3.2(i),  </>(/, x).  Since  /  was  arbitrary,  (1) 
holds. 

This  gives  the  construction  for  formulas  of  the  simple  form  (1).  More  complicated 
formulas  might  require  more  dictionaries  and  dictionaries  of  higher  arity,  but  the  con¬ 
struction  is  no  more  difficult  except  notationally.  □ 


Theorem  3.3.  Let  21  be  a  first-order  structure  with  countable  domain  A.  Any  relation 
on  21  accepted  by  an  IND  program  with  dictionaries  is  77}. 

Proof.  First  we  pick  an  appropriate  concrete  representation  of  dictionaries.  We  will 
use  an  auxiliary  data  structure  similar  to  cons  structures  of  Lisp  and  Scheme.  Let  pair 
and  nil  be  function  symbols  of  arity  2  and  0,  respectively.  Let  ^(21)  be  the  free  term 
algebra  over  pair  and  nil  generated  by  A.  The  elements  of  ^(21)  are  finite  labeled 
binary  trees  whose  leaves  are  labeled  with  elements  of  A  or  the  empty  tree  nil  and 
whose  internal  nodes  are  labeled  with  pair. 

We  endow  ^(21)  with  distinguished  operations  pair^(2l),  nil^(2l),  head^(2t),  and 
taj|^(^),  where  pair^)  and  nil^2^  are  interpreted  syntactically,  and  where  head6(2l) 
and  tail*<*>  are  the  left  and  right  projections,  respectively,  corresponding  to  pair^2^. 
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In  addition,  we  define  the  following  unary  predicates  on  ^(21): 


isPair*(a)(x)  =f  3y  3zx  =  pair m\y,z) 

isNil*<a>(jt)=*  =  nil*(a) 


isElement^a)(x)  =f  -iisPair^(a)(x)  A  -iisNil^(a)(x). 


Since  A  is  countable,  there  exists  an  embedding  of  ^(21)  into  A,  although  the  em¬ 
bedding  is  not  necessarily  explicitly  definable  in  21.  Specifically,  there  exist  functions 


pair :  A2  — >  A 


encode  :  A  — >  A 
decode  :  A  — >  A 
nil  e  A 


head  :  A  — >  A 


tail  :  A  — >  A 


and  predicates 

dcf 

isPair(x)  =  3y  3z  x  =  pair(y,z) 
isNil(x)  d=  x  =  nil 

dcf 

isElement(x)  =  -<isPair(x)  A  -iisNil(x) 
satisfying  the  following  coherence  conditions : 

Vx  \/y  head(pair(x,  y))  =x 

Vx  My  tail(pair(x,y))  =  y 

Vx  isPair(x)  — >  pair(head(x), tail(x))  =  x 

Vx  decode(encode(x))  =  x 

Vx  isElement(x)  — >  encode(decode(x))  =  x 

Vx  exactly  one  of  isPair(x),  isNil(x),  isElement(x). 

We  abbreviate  the  conjunction  of  these  conditions  by 

coherent(pair,  head,  tail,  encode,  decode,  nil). 

Let  I  be  the  signature  of  21.  Let  /  and  R  stand  for  function  and  relation  symbols, 
respectively,  of  Z.  For  some  choice  of  pair,  head,  tail,  encode,  decode,  and  nil 
satisfying  the  coherence  conditions,  consider  the  structure 

2t;  =  (A,  Z',  pair,  head,  tail,  nil,  encode,  decode), 

where 


V^{/'|/er}u{*'|*  er}, 

f'  =f  encode  of  o  decode, 


R'd=  R  o  decode, 
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that  is, 

f'(ai,  ...,an)d=  encode(/(decode(<2i decode^))), 

R'(a\ , . . . ,  an)  =f  7?(decode(ai decode^)). 

The  map  encod e:A^A  extends  uniquely  to  a  homomorphism  of  the  structure 

#(»)  =  (#(&),  Z,  pair^(2l),  head^(2l),  tail^(2t),  nil^(2l)) 
into  21'. 

Now  any  program  P  over  &(2l)  can  be  simulated  by  a  program  P'  over  a'.  The 
program  P'  is  obtained  from  P  by  the  following  transformations: 

(i)  replace  /  by  f  and  R  by  R'; 

(ii)  replace  x  :=  3  by  the  program  x  :=  3 ;  if  -i  isElement(x)  then  reject; 

(iii)  replace  y  :=  V  by  the  program  y  :=  V ;  if  -iisElement(x)  then  accept. 

Then  P  accepts  xi,...,x„  iff  P'  accepts  encode(xi ),...,  encode(xw).  But  by  Harel  and 
Kozen  [5],  the  predicate  “Pf  accepts  encode(xi),  ...,encode(xw)”  can  be  expressed 
by  a  77}  formula  (//  over  a',  thus  P  accepts  xi,...,xn  iff  the  following  formula  is  true 
in  a: 


Vpair  Vhead  Vtail  Vencode  Vdecode  Vnil 

coherent(pair,  head,  tail,  encode,  decode,  nil)  — >  x/jl 

This  is  a  77}  formula. 

It  remains  only  to  show  how  to  use  the  pairing  apparatus  of  &(3l)  to  implement 
dictionaries.  This  is  quite  standard.  We  represent  a  dictionary  as  a  list  of  (key, value) 
pairs  terminated  by  nil.  For  example,  a\  i— a2i->Z?2,  <23 i— >63  would  be  represented 
as  the  list 

pair(pair(ai,6i),  pair(pair(a2,Z?2),  pair(pair(a3,63),  nil))). 

The  dictionary  operations  can  be  implemented  as  follows: 

•  £/.reset(  ): 

d  :=  nil; 

•  <i.put(x,  y): 

d  :=  pair(pair(x,  y),d); 

•  if  J.containsKey(x)  then  a  else  /?: 

for  ( e  :=  d\  e  ^  nil;  e  :=  tail  e)  { 
if  (head(head  e)  =x)  then  a; 

} 

goto  /?; 

•  y  :=  J.get(x): 

for  (e  :=  d;  e  ^  nil;  e  :=  tail  e)  { 
if  (head(head  e)  =  x)  { 
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y  :=  tail(head  e ); 
break; 

} 

}  □ 

Combining  Theorems  3.1  and  3.3,  we  have 

Corollary  3.4.  Over  any  countable  structure ,  IND  programs  with  dictionaries  accept 
exactly  the  77}  relations. 
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